Privacy policy
Last updated: 18 May 2026
In accordance with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD), we inform you about the processing of your personal data when you use this site.
1. Data controller
- Legal name: Colegio Brains, S.L.
- Tax ID: B80973985
- Address: Calle Salvia 48, La Moraleja, 28109 Alcobendas, Madrid, Spain
- Email: dpo@colegiobrains.com
- Phone: +34 916 50 18 76
2. Purpose of processing
We process the personal data you provide through the contact form in order to respond to your request for information about our music education services and, where applicable, to manage the subsequent contractual relationship arising from that request.
3. Legal basis
The legal basis for processing is your explicit consent, given when you tick the acceptance checkbox before submitting the form (art. 6.1.a GDPR).
4. Recipients
Your data will not be shared with third parties except where required by law. As data processors, we rely on:
- Resend Inc. — transactional email delivery. Certified under the Data Privacy Framework.
- Cloudflare Inc. — CDN, security and anti-spam protection (Turnstile). Certified under the Data Privacy Framework.
- Website hosting provider — technical hosting for the site.
5. Retention period
We retain your data for as long as necessary to respond to your enquiry and, once the relationship has ended, for the legally required periods to fulfil legal obligations or address potential liabilities.
6. Your rights
You may exercise the following rights by emailing dpo@colegiobrains.com with a copy of your ID:
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure when no longer necessary.
- Restriction of processing.
- Data portability.
- Objection to processing.
- Withdrawal of consent.
If you believe the processing of your data does not comply with regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Source of data
The personal data we process is provided directly by the data subject, voluntarily, through the contact form.
8. Cookies
For more information on cookies, see our Cookie policy.